CVE-2026-101767

Vendor

Oracle

Product

E-Business Suite, PeopleSoft

CVSS

9.8

EPSS

0.006 (p49)

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 38
   Research Horizon3 11d ago

   CVE-2026-101767 | Oracle E-Business Suite TCF SQL Injection and Remote Code Execution

   CVE-2026-101767 is a critical (CVSS 9.8) unauthenticated SQL injection vulnerability in Oracle E-Business Suite 12.2.3–12.2.15. Horizon3 researchers identified an attack chain enabling remote code execution through the TCF…

   CVSS 9.8 CVE-2026-101767 Oracle
2. 22
   CCCS advisory CCCS 10d ago

   Oracle Corporation security advisory (AV26-1071)

   CVE-2026-101767 Oracle
3. 22
   News The Register 3d ago

   Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble

   Attackers probe another EBS bug, and ShinyHunters' PeopleSoft 0-day turns out to involve three vulns

   CVE-2026-101767CVE-2026-35273 Oracle
4. 22
   News SecurityWeek 4d ago

   Hackers Start Probing Fresh Oracle EBS Vulnerability

   CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek .

   CVE-2026-101767 Oracle